CBC: Does CBC detect or block any modifications to the Windows "hosts" network file?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Does CBC detect or block any modifications or replacement of the Windows "hosts" network file?
 

Environment

• Endpoint Standard Sensor
• Endpoint Standard Sensor UI
• Windows: All versions

Resolution

No, not "out of the box" (as of February 2021).
This capability is being considered with "DETECT-2398".

Additional Information

There are still the standard policy rules that can be written to accomplish this.